Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61aba975-1752-4022-8ba1-d2e851c60ade.roa
File:                     61aba975-1752-4022-8ba1-d2e851c60ade.roa (raw, json)
Hash identifier:          OPFkbfLDAnPK6qH4SndQNAXozIdX+unxEroqNgfFQ1o=
Subject key identifier:   9F:BD:F4:A4:6E:48:FF:46:E0:9B:F3:C3:A5:5B:5A:AB:5C:E9:33:7B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DFFE7F9B3ACB5B6813EF33000B244A08E1C7348
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61aba975-1752-4022-8ba1-d2e851c60ade.roa
Signing time:             Sun 01 Mar 2026 00:40:44 +0000
ROA not before:           Sun 01 Mar 2026 00:40:44 +0000
ROA not after:            Sat 30 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ff:e7:f9:b3:ac:b5:b6:81:3e:f3:30:00:b2:44:a0:8e:1c:73:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Mar  1 00:40:44 2026 GMT
            Not After : May 30 23:59:59 2026 GMT
        Subject: serialNumber=fedfdc1204a4ce328c54ede9030e07752101f572862bfb87f3f810fe22c2640a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:b0:8b:32:f8:77:15:12:fc:14:58:67:d2:
                    33:82:d9:83:df:8b:0a:e3:01:f4:8f:50:97:1e:5c:
                    2e:d5:8c:ca:91:e2:3a:aa:17:2b:ef:0e:c5:3e:5d:
                    40:ea:02:2c:b5:7b:71:ef:25:dd:c4:27:9b:de:e9:
                    a2:b8:bd:d3:31:7f:9c:c6:83:18:da:b0:48:ff:ac:
                    ca:90:bd:4f:c9:35:6e:bd:13:22:e4:84:5d:27:19:
                    c2:2d:f4:b2:b4:14:8a:b4:8d:df:50:b0:13:6f:db:
                    c3:b7:b6:aa:2c:98:c9:bc:e3:42:68:1a:99:79:16:
                    a0:37:9e:7e:11:ec:ef:80:76:64:ad:ab:66:b9:00:
                    a9:fd:bd:24:5a:a5:79:2c:89:bf:23:5c:b6:ec:c0:
                    d2:b9:ee:51:28:34:e1:52:7c:52:7d:0f:8a:42:8f:
                    07:3a:cd:54:bf:b4:bb:42:a0:81:b4:7a:35:08:d9:
                    eb:4c:d5:b4:da:07:ca:d8:82:7d:b0:3c:78:c0:9a:
                    c8:f5:99:92:e2:8d:2e:5d:f1:58:fd:92:10:fd:c8:
                    07:c2:30:13:b0:30:e4:42:e5:8e:6f:b9:64:d9:63:
                    ba:c1:d9:00:16:bf:34:f1:77:19:87:aa:66:87:bc:
                    68:59:5d:1b:f4:d8:4a:35:cd:3c:33:cd:3c:78:a3:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BD:F4:A4:6E:48:FF:46:E0:9B:F3:C3:A5:5B:5A:AB:5C:E9:33:7B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/61aba975-1752-4022-8ba1-d2e851c60ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:87:a8:07:22:3b:7e:ec:8b:ca:5b:b2:77:38:04:bb:a6:71:
         17:49:06:93:2c:11:53:6f:0a:35:5f:4b:df:55:9a:77:48:e0:
         98:46:10:26:4a:5a:19:5a:78:38:68:61:7c:95:5d:7d:65:b1:
         b3:65:d9:2f:ad:38:71:42:9c:ed:6b:b0:a0:79:9c:87:89:39:
         d4:80:f2:3c:90:49:8a:95:e4:fe:8c:e2:35:77:67:8b:97:2f:
         6e:5a:c7:08:07:0e:ae:95:9a:b3:78:20:c6:01:57:f4:cb:4e:
         1d:75:ba:33:ad:ef:a6:b0:1a:fd:57:2c:41:77:27:5a:4b:cd:
         e4:44:58:13:f2:9b:68:bf:25:06:57:53:3b:fb:a8:4f:08:66:
         10:8d:6d:42:e9:93:05:23:29:c0:46:fa:1c:a8:c5:c5:bc:1b:
         8d:24:23:5d:7b:60:43:c4:64:87:bf:f4:39:52:a2:8d:73:7c:
         7c:34:ab:84:54:22:35:24:a6:43:4e:19:ef:29:b9:61:c6:de:
         f9:bf:5a:9e:0d:c7:d7:2f:0c:b5:0e:36:46:db:df:8a:ff:f3:
         b1:d0:1f:1f:e9:4c:6b:4d:36:cc:eb:30:16:5a:db:ed:fd:53:
         90:29:a7:d2:d5:76:9b:48:67:2e:4e:e6:64:06:f0:48:b7:bd:
         68:48:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:44 2026 by rpki-client